The domain ttb.getprogramudate.com is registered by proxy through SOLUCIONES CORPORATIVAS IP, SL and was originally registered in November of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Vitoria-Gasteiz, Pais Vasco within Spain which resides on the RIPE Network Coordination Centre network.
Registrant:
Only contact by email, all postal mail will be rejected
Registrar:
SOLUCIONES CORPORATIVAS IP, SL
Server location:
Pais Vasco, Spain (ES)
Create date:
Tuesday, November 11, 2014
Expires date:
Wednesday, November 11, 2015
Updated date:
Wednesday, December 23, 2015
ASN:
AS57910 SCIP-AS Soluciones Corporativas IP, SL,ES
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.PluginUpdateSL.F, PUP.Installer.Fileangels.F, PUP.Installer.Softpulse, PUP.Softpulse.PluginUpdate.Bundler (M), PUP.Downloadius.Downloadious.Installer (M), PUP.Softpulse.PluginUp.Bundler (M)
100.00%
avast!
SoftPulse-BC [PUP], Win32:PUP-gen [PUP], Win32:Rootkit-gen [Rtk], Win32:SoftPulse-BP [PUP], Win32:SoftPulse-BB [PUP]
60.00%
VIPRE Antivirus
Threat.4150696, Threat.4778314, Threat.4783235
50.00%
McAfee
SoftPulse, IBryte-FRT, Socrydo
50.00%
K7 AntiVirus
Trojan , Unwanted-Program
50.00%
Kaspersky
not-a-virus:Downloader.Win32.DriverUpd, not-a-virus:AdWare.Win32.iBryte, not-a-virus:AdWare.Win32.SoftPulse
50.00%
Avira AntiVirus
TR/Dropper.Gen, ADWARE/iBryte.Gen4
50.00%
Dr.Web
Trojan.Domaiq.10, Trojan.DownLoader11.40718, Trojan.DownLoader11.40640, Adware.SoftPules.3
40.00%
ESET NOD32
Win32/SoftPulse.Q potentially unwanted application, Win32/Adware.iBryte.BO application, Win32/Adware.iBryte.BQ application
40.00%
Malwarebytes
PUP.Optional.DomaIQ, PUP.Optional.OptimunInstaller
40.00%
Agnitum Outpost
PUA.Downloader, PUA.Agent
40.00%
F-Prot
W32/A-540c5175, W32/A-34fffba4, W32/S-76752e8b
40.00%
NANO AntiVirus
Trojan.Win32.DriverUpd.dipney, Riskware.Win32.IBryte.desauy, Trojan.Win32.DriverUpd.dmnhvv
40.00%
Sophos
SoftPulse, iBryte Premium Installer, PUA 'SoftPulse' (of type Adware)
40.00%
Zillya! Antivirus
Adware.Agent.Win32.23478, Trojan.Buzus.Win32.122155
40.00%
The domain ttb.getprogramudate.com has been seen to resolve to the following 7 IP addresses.
www.renewyourexpireddomain.com
December 4, 2015
ec2-52-26-242-150.us-west-2.compute.amazonaws.com
July 16, 2015
ec2-54-148-148-56.us-west-2.compute.amazonaws.com
July 16, 2015
ec2-54-201-206-95.us-west-2.compute.amazonaws.com
May 3, 2015
ec2-54-201-234-194.us-west-2.compute.amazonaws.com
May 3, 2015
ec2-54-186-35-251.us-west-2.compute.amazonaws.com
November 29, 2014
ec2-54-200-122-95.us-west-2.compute.amazonaws.com
November 29, 2014
File downloads found at URLs served by ttb.getprogramudate.com.
The following file have been seen to comunicate with ttb.getprogramudate.com in live environments.